How to Solve This LabLab Tasks:$1.$Analyze the provided network diagram and develop a strategy to enhance its security posture by strategically re$-$drawing the network topology and deploying the right security appliances in the right place$\mathrm{.}2.$Explain the changes made to the network and how they enhance its security.Steps to Solve the Lab$1.$ Analyze the Existing Network DiagramThe current diagram includes:$1.$Internal Network $($Yellow Zone$)$:Devices for HR$,$ Administration, and Finance are connected via Switch$1,$ but theres no segmentation or isolation of traffic$\mathrm{.}2.$DMZ $($Demilitarized Zone$)$:A public$-$facing web server $($Normal Web Server User$)$ is connected to Switch$3$ and Router$3.$ It is not properly isolated from the internal network$\mathrm{.}3.$External Internet Access:Router$1$ connects to the Internet, but there is no filtering or monitoring of incoming or outgoing traffic$\mathrm{.}4.$Unplaced Security Appliances:VPN Server $(1941),$ IDS $($ISR$4331),$ and Firewall $(5506-$X$)$ are available but not deployed in the network$\mathrm{.}2.$ Develop the Network Security StrategyFollow the instructors comments to position devices and improve security:$1.$VPN IDS Firewall Internet:Remote traffic must first go through the VPN Server $($decrypted$),$ then be analyzed by the IDS for threats, and finally filtered by the Firewall before accessing internal or external resources$\mathrm{.}2.$Zone$-$Specific Firewalls:Each zone $($Internal$,$ DMZ$,$ VPN$)$ should have its own firewall to enforce security policies$\mathrm{.}3.$Avoid Overlapping Zones with the Internet:Security zones like the DMZ and Internal Network must not be directly exposed to the Internet.